Heads up -- potential problems in 3.7, too? [OpenSSH Security Advisory: buffer.adv]

Alex_Lambert · September 16, 2003, 11:37pm

3.7.1 was just released.

Two patches for similar issues in a very short timeframe. Who do they think they are -- Microsoft? <grin>

apl

James_Smallacombe · September 17, 2003, 12:58am

I hope you mean OpenSSH 3.7p1 ?

ken_emery · September 17, 2003, 1:00am

I hope you mean OpenSSH 3.7p1 ?

No, he means 3.7.1. There was another release today.

bye,
ken emery

Jeff_Wasilko · September 17, 2003, 1:03am

No, there was a 2nd release today:

E.B_Dreger · September 17, 2003, 1:04am

Date: Tue, 16 Sep 2003 20:58:13 -0400 (EDT)
From: James Smallacombe

I hope you mean OpenSSH 3.7p1 ?

No. He means 3.7.1p1 -- fire up your compiler(s) again.

Eddy

James_Smallacombe · September 17, 2003, 2:48am

Lovely...still not on the mirrors yet, either...

Jared_Mauch · September 17, 2003, 3:16am

Lovely...still not on the mirrors yet, either...

Obviously check your md5 and other signatures.

- jared